Privacy Policy
Last Update: 30 Oct 2025
1. Controller and Data Protection Officer
Controller According to the GDPR
Akademie der Künste, represented by Manos Tsangaris
Hanseatenweg 10, 10557 Berlin
info@adk.de
Data Protection Officer
Akademie der Künste – Data Protection Officer
Hanseatenweg 10, 10557 Berlin
datenschutz@adk.de
2. Terms, Purposes, Legal Bases – Basic Principle
We only process personal data to the extent necessary to provide our website, to communicate with you, to execute contracts (e.g. ticket purchases) or to display external content/social media, or if you have consented to this. The legal bases are Article 6 (1) (a) (consent), (b) (contract/initiation), (c) (legal obligation) and (f) (legitimate interest) GDPR.
3. Your Rights
You have the following rights:
- Right to information ( Article 15 GDPR)
- Right to rectification (Article 16)
- Right to erasure (“right to be forgotten”) / blocking ( Article 17)
- Right to restriction of processing (Article 18)
- Right to data portability (Article 20)
- Right to object data processing according to Article 6 (1) (f) (Article 21)
- Withdrawal of consent at any time with effect for the future ( Article 7 (3))
To exercise your rights, please send an email: datenschutz@adk.de with the subject line “Privacy policy/enquiry” or another appropriate keyword.
4. Hosting, Server Log Files
When visiting our website for purely informational purposes, technically necessary data is processed to ensure stability and security: IP address, date/time, time zone, URL accessed, HTTP status, amount of data transferred, referrer, browser, operating system, language/version.
Legal basis: Article 6 (1) (f) GDPR (operation/security). Storage period: Log files are generally deleted within 7–14 days; longer storage only occurs on a case-by-case basis (e.g. to investigate security incidents).
5. Cookies, Consent and Terminal Device Access (TDDDG)
Our website uses cookies. Some cookies are technically necessary, while others serve statistical or marketing purposes.
When you visit our website for the first time, you will be asked to consent to the use of non-essential cookies via a consent banner (“cookie banner”). You can revoke or adjust your consent at any time via the cookie settings.
For the use of cookies/trackers that are not technically necessary (e.g. for statistics, convenience, embedded third-party content), we obtain your consent in advance via a consent management tool. Legal basis: Section 25 (1) TDDDG (Telecommunications Digital Services Data Protection Act) for access to your device in conjunction with Article 6 (1) (a) GDPR for subsequent data processing. You can change or revoke your selection at any time in the consent banner. Consent is reviewed regularly and requested again after six months at the latest or if the cookies used or their purposes change.
We use technically necessary cookies (e.g. for page navigation, session handling) without consent in accordance with Section 25 (2) TDDDG; the legal basis for data processing is Article 6 (1) (f) GDPR (operationally necessary provision).
6. Communication via Email/Contact Form
If you send us an enquiry using a contact form, your details provided in the form, including your contact details (e.g. name, email address, telephone number), will be stored by us for the purpose of processing your enquiry and in case of follow-up questions.
The data is processed on the basis of your consent in accordance with Article 6 (1) (a) of the GDPR. If your enquiry is aimed at concluding a contract, the processing is based on Article 6 (1) (b) of the GDPR.
Your data will only be forwarded to the relevant department within the Akademie der Künste. The data will not be passed on to third parties.
You can revoke your consent at any time with effect for the future. To do so, simply send an informal email to info@adk.de. The legality of the processing carried out until revocation remains unaffected by the revocation.
The data collected in the form will be deleted as soon as your enquiry has been finally processed and there are no legal retention obligations.
7. Newsletter/Programme Informationen
When subscribing, we process your email address and any voluntary information you provide. We use the double opt-in procedure and log registrations and unsubscriptions. Legal basis: Article 6 (1) (a) GDPR; revocation at any time via the unsubscribe link. If reach measurement (e.g. openings/clicks) is carried out, it is only done with consent.
8. Online Ticket Shop (CTS EVENTIM)
Tickets are sold via CTS Eventim AG. As a rule, Eventim is solely responsible for contract processing; processing is carried out on the basis of Article 6 (1) (b) GDPR. We may receive aggregated sales statistics (Article 6 (1) (f)). For details on data processing, please refer to Eventim's privacy policy (see there).
9. Web Analysis with Matomo
We use Matomo to analyse the reach of our website. Data is only collected after you have given your consent in the consent banner; IP addresses are anonymised; Do Not Track is respected. We have concluded a data processing agreement (DPA) with the provider. Legal bases: Section 25 (1) TDDDG (terminal device access) in conjunction with Article 6 (1) (a) GDPR (analysis). Revocation is possible at any time in the consent banner.
10. Embedding of External Content (YouTube, Vimeo, Spotify, SoundCloud, Podcasts via Podigee)
As a standard procedure, we only integrate external content after obtaining your consent (two-click function in the consent banner). This means that data is only transferred to third-party providers after you have clicked. Legal bases: Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR; legal basis for purely technically necessary retrievals: Section 25 (2) TDDDG/Article 6 (1) (f) GDPR.
YouTube (Google Ireland Ltd.)
We may use YouTube in “privacy-enhanced mode” (youtube-nocookie.com). Nevertheless, data may be transferred to YouTube/Google during playback. Further information can be found in the YouTube/Google privacy policy: https://policies.google.com/privacy?hl=en-GB
Vimeo (Vimeo Inc., USA)
Upon playback, data (e.g. IP address, device information) is transferred to Vimeo. Data transfer to the USA: Vimeo is a participant in the EU-US Data Privacy Framework (DPF); in addition, standard contractual clauses may apply: https://vimeo.com/legal/privacy/policy
Spotify (Spotify AB, Schweden) & SoundCloud (SoundCloud Limited, UK)
Upon activating the players, usage data is transferred to the respective providers; for further details, please refer to the providers' privacy policies: https://www.spotify.com/de-en/legal/privacy-policy (Spotify), https://soundcloud.com/pages/privacy (SoundCloud, in German)
Podcasts via Podigee (Podigee GmbH, Germany)
Our podcasts are hosted and delivered via Podigee; Podigee processes IP and device information for delivery/statistics in accordance with its own privacy policy: https://www.podigee.com/en/about/privacy
11. Social Media Accounts (Facebook/Instagram, X)
We maintain publicly accessible accounts. Upon visiting the platforms, providers process usage data on their own responsibility; we may receive aggregated insights.
Facebook/Instagram (Meta Platforms Ireland Ltd.)
Page Insights is subject to joint responsibility under Article 26 GDPR; Meta's “Page Insights Controller Addendum” applies. You can assert your rights against us as well as against Meta.
X (formerly Twitter)
Please note the privacy policy of X (formerly Twitter). Data may be transferred to third countries (including the USA); depending on the provider status, DPF/SCCs apply (see below for general information on DPF).
12. Data Transfers to Third Countries ( esp. the USA)
When integrating/using certain services, personal data may be transferred to third countries, in particular the USA. If providers participate in the EU-US DPF (Data Privacy Framework), the transfer is based on the EU Commission's adequacy decision; otherwise, we use EU SCCs (Standard Contractual Clauses) plus a transfer impact assessment.
13. Recipients/Categories of Recipients
- IT/hosting providers, support and maintenance providers (order processing)
- Payment/ticket service providers (independent responsible parties)
- Platform providers of embedded content and social media (independent responsible parties)
14. Storage Duration
We store personal data only as long as necessary for the respective purposes. Specific storage periods are determined by legal obligations (e.g. commercial/tax law) or are indicated in the consent banner/by the services. After this period, data is deleted or anonymised.
15. Duty to Provide/Automated Decision-Making
The provision of your data is necessary for the conclusion of a contract (e.g. ticket purchase); otherwise, it is voluntary. Automated decision-making, including profiling, does not take place.
16. Revocation of Consent and Right to Object
You can revoke your consent at any time with effect for the future (e.g. via the consent banner). You also have the right to object to processing based on Article 6 (1) (f) GDPR for reasons arising from your particular situation.
17. Update of this Privacy Policy
We update our privacy policy when the legal situation, our services or data processing change. The current status is shown above.
Please note: This English version of the German privacy policy is intended to inform and assist international visitors. The original German-language version takes precedence in any matters of dispute.